Northflank
Full-stack cloud platform with BYOC, GPU workloads, and isolated AI-agent sandboxes.
About
Northflank is a full-stack cloud platform that combines managed application hosting with bring-your-own-cloud: self-serve BYOC into AWS, GCP, Azure, Oracle, CoreWeave, Civo, on-premises, and bare metal, so data stays inside a team's own infrastructure while Northflank provides the control plane. The same platform runs services, jobs, databases, and GPU workloads side by side, with per-second usage billing and no seat fees.
The August 2025 release pushed GPUs front and center: A100, H100, H200, L4, L40S, and B200 workloads on both managed cloud and BYOC, alongside stack templates and workload scheduling. For AI teams the standout is microVM sandbox isolation: every sandbox runs in its own microVM with a dedicated kernel via Kata, Firecracker, or gVisor, so AI-generated code, user scripts, and LLM tool calls execute under hardware-enforced isolation, with GPU sandboxes supported too. Agent Skills for Claude Code, Codex, Cursor, and OpenCode extend the workflow to coding agents.
The platform is SOC 2 Type 2 certified across managed cloud and BYOC, with HIPAA compliance available under enterprise contracts. Founded in 2019 in London, it remains a private venture-backed company. The breadth of primitives is the main learning curve compared to plug-and-play platforms.
What it can do
- Self-serve BYOC across major clouds and bare metal
- GPU workloads: H100, H200, A100, L4, L40S, B200
- MicroVM-isolated sandboxes for AI agents and untrusted code
- Managed databases, jobs, and CI/CD with agent skills
Setup
Sign up at northflank.com, deploy services from Git, or connect your own cloud account for BYOC.
Prerequisites
A Git repo or container image; a cloud account if using BYOC.
Use cases
Works with
Trust score — 7/10
Scored 7/10 (metrics tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 87; Trending score 74/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.